IN THE CLAIMS : 

Please amend claim 27 as follows. 

1. (Previously Presented) A packet switching control system for controlling a packet 
switched connection between a subscriber terminal (1) and an end terminal (5) identified 
by a connection endpoint identification in a communication network (4) 5 comprising: 

storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications; 

control means (7) for performing a screening control of the packet switched 
connection on the basis of a screening parameter corresponding to the connection 
endpoint identification of the end terminal (5), wherein said control means (7) belongs to 
a different entity than said storing means; and 

screening means for performing a screening process, using the screening list, for 
each packet wherein a connection endpoint identifier (CEI) of each packet is checked as 
to allowed destination, and packets are passed when the destination is allowed whereas 
data packets from/to unallowed destinations are discarded. 

2. (Original) A system according to claim 1, wherein said control means (7) belongs 
to any entity where a packet session is activated, while said storing means belongs to a 
fixed entity. 



3. (Original) A system according to claim 1, wherein the control means (7) is 
arranged to download the subscriber-specific screening list, when the subscriber terminal 
(1) activates a packet data session. 

4. (Original) A system according to claim 3, wherein the control means (7) is 
arranged to download the subscriber-specific screening list, when a packet is transmitted. 

5. (Original) A system according to claim 3, wherein the control means (7) is 
arranged to load the subscriber-specific screening list from an external server or a 
location register (8) during an attach or location update procedure or a PDP context 
activation, and to store the loaded screening list in the storing means. 

6. (Original) A system according to claim 5, wherein the subscriber-specific 
screening list comprises a tag indicating whether the list contains allowed or denied 
connection endpoint identifications, and wherein the control means (7) is arranged to let 
pass only those data packets transmitted from/to an allowed connection endpoint. 

7. (Previously Presented) A packet switching control system for controlling a packet 
switched connection between a subscriber terminal (1) and an end terminal (5) identified 
by a connection endpoint identification in a communication network (4), comprising: 



storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications; and 

control means (7) for performing a screening control of the packet switched 
connection on the basis of a screening parameter corresponding to the connection 
endpoint identification of the end terminal (5), wherein said control means (7) belongs to 
a different entity than said storing means; and 

wherein the subscriber-specific screening list is initialized as an empty list which 
is updated by the control means (7) each time the control means (7) receives a data packet 
with a connection endpoint identification not included in the subscriber-specific 
screening list. 

8. (Original) A system according to claim 7, wherein the update of the subscriber- 
specific screening list is performed by an inquiry to a service control function which 
answers to the inquiry by transmitting a connection parameter for the corresponding 
connection endpoint identification. 

9. (Previously Presented) A system according to claim 3, wherein the subscriber- 
specific screening list is propagated to other network elements, if it is has been modified 
by a subscriber. 



10. (Previously Presented) A system according to claim 1, wherein said control means 
(7) is a network element and arranged to perform packet screening for downlink packets 
in accordance with the subscriber-specific screening list. 

11. (Original) A system according to claim 10, wherein said network element (7) is 
arranged to monitor an uplink traffic transmitted from the subscriber terminal (1) via the 
packet switched connection and to command the subscriber terminal (1) to screen data 
packets transmitted to an end terminal (5) identified as a denied packet destination based 
on said subscriber-specific screening list. 

12. (Previously Presented) A system according to claim 10, wherein the 
communication network (4) is a General Packet Radio Services (GPRS) network and 
wherein the network element is a Gateway GPRS Support Node (GGSN) (7). 

13. (Original) A system according to claim 12, wherein the screening list comprises a 
charging information, and wherein the GGSN (7) is arranged to supply the charging 
information to a Serving GPRS Support Node (SGSN) (6) which performs a charging 
operation in accordance with the charging information. 



14. (Previously Presented) A system according to claim 1, wherein the connection 
endpoint identification is one of a PDP address, an IP address, a subaddress space, a port 
number, a DNS hostname and protocol, a cipherkey or a combination of these. 

15. (Previously Presented) A subscriber terminal (1) for controlling a packet switched 
connection to an end terminal (5) identified by a connection endpoint identification in a 
communication network (4), comprising: 

loading means for loading a subscriber-specific screening list; 

control means (7) for performing a packet screening for uplink packets on the 
basis of a screening list parameter corresponding to the connection endpoint 
identification of the end terminal (5); and 

screening means for performing a screening process, using the screening list, for 
each packet wherein a connection endpoint identifier (CEI) of each packet is checked as 
to allowed destination, and packets are passed when the destination is allowed whereas 
data packets from/to unallowed destinations are discarded. 

16. (Original) A subscriber terminal according to claim 15, wherein said subscriber 
terminal is a mobile station equipment. 
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17. (Previously Presented) A packet switching control system for controlling a packet 
switched connection between a subscriber terminal (1) and an end terminal (5) identified 
by a connection endpoint identification in a communication network (4), comprising: 

storing means for storing a subscriber-specific screening list for a plurality of 
connection endpoint identifications, wherein a detection point information for an 
interrogation of an Intelligent Network (IN) service control function can be set selectively 
for a specific connection endpoint identification in the subscriber-specific screening list; 

control means (7) for triggering an IN interrogation, when a data packet with a 
connection endpoint identification, for which a detection point information is set, is 
transmitted via the packet switched connection; and 

screening means for performing a screening process, using the screening list, for 
each packet wherein a connection endpoint identifier (CEI) of each packet is checked as 
to allowed destination, and packets are passed when the destination is allowed whereas 
data packets from/to unallowed destinations are discarded. 

18. (Original) A system according to claim 17, wherein the IN interrogation is 
triggered only for a first data packet having a new connection endpoint identification 
marked with a detection point. 

19. (Previously Presented) A system according to claim 17, wherein the control means 
(7) is commanded by the service control function, which has received the IN 



interrogation, so as to replace the corresponding detection point information by a 
subscriber-specific screening information, and so to accept a data packet or to reject the 
data packet in accordance with the subscriber-specific screening information. 

20. (Previously Presented) A system according to claim 19, wherein the service 
control function which has received the IN interrogation provides a more detailed 
subscriber-specific screening profile to the control means (7). 

21. (Previously Presented) A packet switching control method for controlling a packet 
switched connection between a subscriber terminal (1) and an end terminal (5) identified 
by a connection endpoint identification in a communication network (4), comprising the 
steps of: 

providing a subscriber-specific screening list for a plurality of connection endpoint 
identifications; 

performing a screening control of the packet switched connection in another entity 
on the basis of a screening parameter corresponding to the connection endpoint 
identification of the end terminal (5); and 

performing a screening process, using the screening list, for each packet wherein a 
connection endpoint identifier (CEI) of each packet is checked as to allowed destination, 
and packets are passed when the destination is allowed whereas data packets from/to 
unallowed destinations are discarded. 



22. (Original) A method according to claim 21 , wherein the subscriber-specific 
screening list is loaded from an external server or a location register (8) during an attach 
or location update procedure or a PDP context activation. 

23. (Original) A method according to claim 21, wherein the subscriber-specific 
screening list is initialized as an empty list and updated each time a data packet with a 
connection endpoint identification not included in the subscriber-specific screening list is 
received. 



24. (Previously Presented) A method according to claim 21, further comprising the 
step of propagating the subscriber-specific screening list to other network elements, if it 
is has been modified by a subscriber. 

25. (Previously Presented) A method according to claim 21, wherein the screening 
control is performed in a network element for downlink packets and in the subscriber 
terminal for uplink packets. 

26. (Previously Presented) A method according to claim 21, wherein an uplink traffic 
transmitted from the subscriber terminal via the packet switched connection is monitored 
and the subscriber terminal is commanded to screen data packets transmitted to a packet 
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destination identified as a denied packet destination based on said subscriber-specific 
screening list. 

27. (Currently Amended) A method according to claim ±& 21, wherein the screening list 
comprises a charging information. 

28. (Previously Presented) A packet switching control method for controlling a packet 
switched connection between a subscriber terminal (1) and an end terminal (5) identified 
by a connection endpoint identification in a communication network (4), comprising the 
steps of: 

providing a subscriber-specific screening list for a plurality of connection endpoint 
identifications; 

selectively setting a detection point information for an interrogation of an 
Intelligent Network (IN) service control function for a specific connection endpoint 
identification in the subscriber-specific screening list; 

triggering an IN interrogation, when a data packet with a connection endpoint 
identification, for which a detection point information is set, is transmitted via the packet 
switched connection; and 

performing a screening process, using the screening list, for each packet wherein a 
connection endpoint identifier (CEI) of each packet is checked as to allowed destination, 
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and packets are passed when the destination is allowed whereas data packets from/to 
unallowed destinations are discarded. 
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